Method checkToken

utils/token.js:30–74

(token)

    }

    checkToken(token) {
        let decodeToken = (token) => {

            let decArr = token.split(".");
            if (decArr.length < 2) {
                //token不合法
                return false;
            }

            let payload = {};
            //将payload json字符串 解析为对象
            try {
                payload = JSON.parse(Buffer.from(decArr[0], "base64").toString("utf8"));
            } catch (e) {
                return false;
            }

            //检验签名
            let secret = "作者QQ:1178560551";
            let hash = crypto.createHmac('sha256', secret);
            hash.update(decArr[0]);
            let checkSignature = hash.digest('base64');

            return {
                payload: payload,
                signature: decArr[1],
                checkSignature: checkSignature
            }
        }

        let resDecode = decodeToken(token);

        if (!resDecode) {
            return false;
        }

        //是否过期
        let expState = (parseInt(Date.now() / 1000) - parseInt(resDecode.payload.created)) > parseInt(resDecode.payload.exp) ? false : true;

        if (resDecode.signature === resDecode.checkSignature && expState) {
            return true;
        }

        return false;
    }

}